Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

1 detection

Remote Management and Monitoring tool - DistantDesktop - Network Connection

KQL
Remote Monitoring and Management (RMM) programs are IT to manage remote endpoints. Attackers have begun to abuse these programs to persist or provide C2 channels.
https://github.com/jischell-msft/RemoteManagementMonitoringTools
Azure Sentinel@AzureSentinel
avatar
AzureSentinel
1 year ago
0027